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Attorney Docket No. 18477-000100 

METHOD AND SYSTEM FOR DISTRIBUTING AND 
5 RECONCILING ELECTRONIC PROMOTIONS 

6i^cLcX 6LIJ>> 
BACKGROUND OF THE INVENTION 

The present invention relates generally to 
discounting of goods and services to consumers, and, more 
10 particularly, to the electronic distribution of promotions, 

such as discounts and rebates for goods and seirvices, and the 
subsequent resolution upon the redemption of the promotions by 
consumers . 

Heretofore, consumer discounts have been in the form 
15 of physical tokens or coupons by which a consumer can obtain a 
discount on the price of a good or a service by redeeming the 
coupon. Typically, paper coupons are physically distributed 
to consumers. For instance, coupons are often distributed 
with newspapers, or by blanket mailing to residents of a 

2 0 neighborhood or region. Coupons are sometimes distributed 

with items so that purchasers are encouraged to continue their 
purchases of the item, i.e., to encourage brand loyalty. 

More recent forms of coupon distribution have 
attempted to better target the potential purchasers of 
25 particular items. For example, coupons are placed on the back 
of store purchase receipts, such as those at supermarkets, so 
that the coupons target those who actively shop. The coupons 
can be changed at the stores to quickly respond to changes in 
marketing campaigns. Another form of coupon distribution 

3 0 takes advantage of the computerization of sales networks. 

When a sale of a particular item is entered on a Universal 
Product Code (UPC) reader at a store, such as a supermarket, a 
coupon for the same item or family of items may be created for 
the purchaser to ensure brand loyalty. Alternatively, the 
3 5 coupon may be for a competing band to encourage " brand - 

switching." Because the UPC reader is typically part of a 
large computer network, the distribution of the coupons can be 
changed or terminated very quickly. 
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Nonetheless, the problems of paper coupons still 
remain. Besides the distribution of coupons, the expense of 
the administration for the redemption of the coupons is high. 
Fraud remains a problem in coupon redemption and the targeting 
5 of consumers for particular goods and services can still be 
improved. Even electronic coupon distribution requires 
complex actions on the part of the consumer, such as printing 
a coupon or token, and taking it to a store for redemption. 
In the ideal case, electronic discounts should only require 

10 simple selections by the consumer. 

Furthermore, from the producer's and retailer's 
standpoint, the targeting of consumers remains difficult and 
expensive. Ideally, a database of all consumers would allow 
the precisely targeting of advertisements, discounts being a 

15 form of advertisement, to individual consumers. The 

effectiveness of customer targeting would be maximized. To 
that end, producers and retailers have used emerging 
technologies to identify consumers and their purchasing 
interests. Surveys using modern polling techniques have 

20 helped create such consumer databases, and computers have been 
used to correlate buying patterns of customers through store 
loyalty cards, for example. 

However, such consumer identification remains 
elusive and expensive. Moreover, and perhaps more 

2 5 importantly, such goals of consumer identification are 

repugnant to notions of individual privacy. With the 
increased linking of computers by electronic networks, such 
concerns are likely to increase. Besides the individual 
resistance to divulging personal information, legal restraints 

3 0 on the use and gathering of personal information are possible, 

if not likely. 

The present invention provides for a system and 
method which addresses these privacy concerns in a flexible 
way, while providing for the effective targeting of consumers. 
3 5 The most appropriate discounts or other promotions are 

directed toward the individual consumer, yet the anonymity of 
the consumer is preserved. The present invention eliminates 
the paper coupon or its electronic counterpart, and is highly 
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resistant to fraud. No paper coupons are handled by the 
consumer, the merchant, the manufacturer of the goods, or 
provider of the service ; 

In addition to targeting consumers individually by 
5 their purchasing habits, the present invention also permits 

the consumer to view their total buying history. This is not 
a feature currently available at the level of retail sales. 
While credit card companies today track purchases at the store 
level, purchases at the level of individual items are not 
10 tracked. The ability of a consumer to track his or her total 
consumption history is a unique feature of the current 
invention. 

The present invention also permits the aggregation 
of several kinds of discounts. For example, a retailer 

15 loyalty program may offer a discount on an item, and a 

manufacturer may offer a discount on the same or a different 
item. The present invention permits, a unified display and 
reconciliation of both discounts; in the former case by adding 
two discounts on the same item, and in the latter case, by 

20 displaying both discounts in the same account. 

SUMMARY OF THE INVENTION 
To reach these seemingly contradictory goals, the 
present invention provides for a method and system for 

2 5 distributing and redeeming electronic promotions to a consumer 
through a communications network, such as the Internet. An 
account is maintained for each consumer and a unique key is 
associated with each consumer account . This account may be 
established by a registration process, such as is used in 

30 so-called "loyalty card" programs many retailers currently 
have in place. Access is permitted to the consumer account 
upon presentation of the unique key over the communications 
network. The consumer is presented discount choices of items 
available in at least one store associated with the unique 

35 key, or a collection of such stores, over the network and the 
selections of the discount choices made by the consumer over 
the communications network are recorded. Upon purchase of 
items at the associated store by the consumer, such data are 
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received, and the selections and purchases are reconciled to 
record a credit in the consumer account. 

In one embodiment of the present invention, no 
direct consumer identification is maintained in the consumer 
5 account to preserve the anonymity of the consumer. For 

example, only the loyalty card identifier need be managed 
according to the present invention; the identity of the 
consumer is not needed. The purchasing history of the 
consumer at the store where the promotion is redeemed for 

10 items (which need not be limited to the item(s) being 

promoted) is maintained in a database, and the consumer may 
access this history (in one embodiment of the invention) . 
This histoiry can then be used not only, to help the consumer in 
personal finance management efforts, but also to help the 

15 consumer identify trends in his buying habits which may 
benefit from modification or reinforcement. 

BRIEF DESCRIPTION OF THE DRAWINGS 
Fig. 1 is a block diagram of an Internet computer 
20 network link between consumers and the Discount Administration 
Process (DAP) , according to the present invention; 

Fig. 2 is a block diagram of a representative point- 
of-sale computer network system, as found in a typical modern 
retail operation,, and its connection to the DAP; and 
25 Fig. 3 is a block diagram of a computer network 

connection between the discounters and the DAP, according to 
the present invention. 

DETAILED DESCRIPTION OF THE SPECIFIC EMBODIMENTS 
30 The channels of distribution of, and payment for, 

goods in a modern society are complex. Broadly stated, there 
is the producer which manufactures the goods, the retailer 
which sells the goods, and the consumer who purchases the 
goods. There is often a financial institution which supplies 
35 credit, for example, through a credit card, or which 

administers some other non-cash payment system, for example, 
through a debit card or a so-called smart card, for the 
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consumer to purchase the goods. To compete in the 
marketplace, the producer and the retailer of goods employ 
advertising, including discounts, e.g., coupons, to encourage 
consumers to purchase their goods. 
5 Increasingly, retail stores, especially chains of 

retail stores, are offering loyalty cards which reward 
shoppers for frequenting the store (s) covered by the loyalty 
card. Stores generally obtain customer information (such as 
name and mailing address) and assign the customer a unique (to 
10 the store or chain) number for identification purposes. When 
the loyalty card is used, advertised promotions are given to 
the consumer in the form of discounts or points, which may be 
redeemed directly at the point of sale as a credit against a 
purchase . 

15 In such complex circumstances, the present invention 

takes advantage of another development in modern society, that 
of the Internet, and in particular, the Worldwide Web. With 
the development of the personal computer, the emergence of the 
so-called network computer, and computer/TV devices designed 

20 specifically to operate over the Internet, such as WebTV or 
NetPC units, more and more people are using the Internet to 
receive and transmit information. The present invention uses 
the Internet by which the consumer receives advertising and 
discount information, and selects the desired promoted 

25 products. In certain cases, the consumer also receives 

information on the credits obtained by his or her purchase of 
discounted items. Conversely, the producer and retailer 
obtain useful consumer information to precisely target their 
advertising and promotional offers. This is all achieved 

30 without requiring the particular identities of consumers to be 
revealed. Privacy is thus preserved to a large extent. 

In general terms and in accordance with the present 
invention, consumers communicate with an Electronics Discount 
Administrator (DAP) over the Internet. Each consumer 

35 identifies him or herself to the DAP by a unique KEY, which 

provides an identification of the consumer to the DAP, and at 
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the same time, a barrier for the consumer from the DAP. The 
DAP makes the consumer aware of discounted and promotional 
items, which have been made available by discounting entities 
(the discounters), which offer the discounts to the consumer. 
5 A discounter may be one or more direct producers, such as 

cereal makers; repackagers, such as stores offering products 
manufactured by producers under the stores' names; or stores 
which offer many discounted products which the stores resell. 
The discounts are indicated by amount, locations where the 

10 discounted items may be purchased, and time of expiration of 
the discounts. The consumer makes his or her selections 
electronically, and the selections are recorded by the DAP. 

To obtain the discounts, the consumer visits an 
associated location, e.g., a store, and purchases the 

15 discounted items. To identify himself or herself to the 

. store, the consumer uses the unique Key. The store sends a 
.record of the purchases with the consumer's identifying Key to 
the DAP. The DAP reconciles the consumer's selections with 
the purchases at the store. The consumer may receive the 

20 discount at the time of purchase, or receive a credit in a 

designated financial account, e.g., the consumer's credit card 
account . 

It should be noted that there is an exchange of 
benefits between the consumer and the discounter. In return 

25 for information containing the consumer's purchasing 

interests, the discounter gives the consumer a discount or 
some other promotional benefit. Hence it is important that 
the consumer make the selection of discounted items. Without 
the selection, the discounter of the product is simply posting 

30 lower prices to the general public over the Internet. 
Additionally, while this specification mentions the 
distribution, discounting and sale of goods, it should be 
understood that the present invention is equally applicable to 
discounted services as well- 
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The Electronic System Organization 

The present invention operates over an organization 
of computers linked over networks. It should be understood 
5 that while a single computer might be described, the computer 
might be one or more computers which are tightly coupled 
(e.g., connected over a backplane), or more loosely coupled 
(e.g., connected by a network). 

Fig. 1 illustrates the general interconnection of 

10 consumers to the Discount Administration Process (DAP) by 
which the consumers receive advertising and discount 
information and make their selection of the "electronic 
discounts." The consumers use their computers 10 for 
connection to the computer 11 of the DAP through the Internet. 

15 The consumer computers 10 may be standard personal computers, 
the emerging so-called network computers, computer /TV devices 
designed specifically to operate over the Internet, such as 
WebTV or Net PC devices, or other data entry systems which 
permit two-way communication over the Internet. The consumer. 

20 computers 10 access the Internet through a computer server 12 
of an Internet service provider (ISP) . The ISP server 12 is 
connected to the Internet, a network of computers, represented 
by an Internet computer 13. The DAP computer 11 is connected 
to the Internet through a DAP Internet computer server 14. 

25 The DAP computer 11 is also connected to the 

computers of the seller of the discounted goods. Fig. 2 is 
illustrative of the general organization of the point-of-sale 
operation, i.e., a large store chain, for goods (and 
services). The store, e.g., a supermarket, typically operates 

30 with electronic cash registers 21, essentially computers which 
record each item sold, calculate the sales totals, prints the 
receipt, and so forth. Each cash register 21 is often 
connected to a Universal Product Code (UPC) scanner 26 and/or 
an Automated Teller Machine (ATM) reader 27. The UPC scanner 

35 26 identifies bar codes on the products to the cash register 
21. The ATM reader 27 reads the magnetically encoded account 
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number of a credit/debit/smart card which has been issued by 
some financial institution, such as a bank, or a store-issued 
loyalty card, belonging to a consumer. Some cards may also 
encode their identification number as a bar code which is read 
5 by the UPC scanner. The ATM reader 27 also typically accepts 
typed-in, or otherwise entered, private information, such as a 
personal information number (PIN), to securely identify the 
card holder. 

In some larger stores, the cash registers 21 are 

10 connected to a store computer 22, which maintains the 

centralized inventory, pricing and discount information of the 
store. In turn, the store computer 22 is connected via a 
network to a master store computer 23. The master store 
computer feeds pricing information to many store computers 22. 

15 Of course, there can be multiple levels for store computers 22 
depending upon the size of the retail operation. Naturally, 
nationwide store chains are likely to have many more computers 
and computer interconnections. 

Outside of the retail network, the master store 

20 computer 23 is connected to the computers 24 of financial 

institutions (FIT) . The FIT computers 24 verify and process 
the financial transactions involving credit, debit and smart 
cards, including those at the store register 21. Besides the 
connections to the FIT computers 24, the master store computer 

25 23 is connected to the DAP computer 11. This connection 

permits the DAP computer 11 to reconcile the selections made 
by the consumer with the purchases at the store. 

It should be noted that the computer network which 
interconnects the cash registers 21, UPC readers 22, ATMs 23, 

30 store and master store computers 22 and 23, and the FIT 

computers 24 belong a private network, i.e., not the Internet. 
Such networks are typically in the form of WANs (Wide Area 
Networks) of varying degrees of complexity. The DAP computer 
11 is connected to this network to make the interconnections 

35 described above. 
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Fig. 3 illustrates the general network 


interconnection of the DAP computer 11, not only with the DAP 
Internet server 14 and master store computer 23, but also with 
the computer 31 of a discounter (DIS) and a computer 32 of the 
discounter's financial institution (DISFIT) . The connection 
to the DIS computer 31 allows the DAP computer 11 to receive 
discount information, detailed below, from the discounter. 
The DAP computer 11 communicates with the DISFIT computer 32 
so that the discounter's account is debited for goods 
purchased by the consumers under the discounter's discount. 
The DAP computer 11 may also be connected to the computer 2 4 
of the consumer' s financial institution (CONFIT) . This 
connection allows credit obtained by the purchase of 
discounted goods to be placed into the consumer's account at 
the consumer' s financial institution in an embodiment of the 
present invention wherein the discount is not taken at a store 
register 21. 


network for the discounter and its financial institution ( s ) is 
another private network, typically a WAN. The DAP computer 11 
is connected to this network and other private networks 
belonging to the financial institutions of the consumers. 


such as credit /debit/smart card companies, or by a third 
party, such as the operator of the DAP. A Key might also 
issued as a part of a retailer' s loyalty card program. The 


As in the case of the store WAN above, the computer 


Operations of the System 


The Discount Administration Process Computer 



Keys may be distributed by financial institutions. 
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stores accepting a particular Key are associated with the Key. 
For example, when the consumer specifies a unique 
identification (ID) bound to a particular loyalty program, 
retailer or chain, the stores associated with the Key are 
5 clearly defined. Of course, only certain identified stores 
within a chain may offer a particular promotion. 

There can be different levels of identification in 
the Key Database. One level is the secure registration level. 
At this level, the Key Database, which is stored on the DAP 

10 computer 11, contains a consumer's KEY and one or more 

credit/debit /smart card account numbers (FIDs) issued by a 
financial or retail institution to the consumer. The Key 
Database appears as (note that there is a database for each 
set of KEY'S obtained by a separate registration process. 

15 Thus, if two different store chains with separate loyalty 
programs are in the database, the same consumer may be 
represented by two different KEY's, and the identity of the 
chain is implicit in which database is accessed) : 
<KEYo, FX Do, FIDi, . . . FIDk> 

20 <KEYi, FIDo, FIDi, . . . FIDk> 

<KEY2, FIDo, FIDi, . . . FIDk> 

<KEY^, FIDo, FIDi, . . . FIDk> 
The Key Database may contain alternatively or concurrently 

25 some other personal identification, such as a Social Security 
number, a driver license number, passport number, or even 
biometric information, such as a fingerprint, of the consumer. 

A lower level of identification is protected 
registration. The Key Database contains the KEY and a lower 

30 level of identification of each consumer. An example is 

simply the KEY and the address of the consumer. It should be 
noted that it is sufficient in this method to simply identify 
the household belonging to a Key, for example, by mailing a 
Key-containing card to the occupant of a given address. In 

35 this way, while a consumer remains anonymous, the consumer 
will have significant difficulty in obtaining a second. 
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unrelated account. Should an attempt be made by requesting 
another Key at the same address, the first Key can be 
invalidated. Should an attempt be made by requesting another 
Key at a different address, the existence of a Key already 
5 assigned to that different address can generate a request for 
the requester to either indicate a change of address 
(resulting in a different Key being subsequently issued to the 
previous address) , or an invalidation of the original Key. 
This binding of Key to address thus allows the consumer to 

10 remain anonymous when accessing their account over the 

Internet, and allows the discounting computational system to 
maintain a consistent history of buying habits for a 
household, without compromising the individual's privacy- 
Note that the address might also be an e-mail address. 

15 Finally, the lowest level of identification is 

simply the KEY with no other identification data. The 
consumer is completely anonymous. This method may be used by 
the DAP computer 11 even if the KEY has non-anonymous bindings 
elsewhere (for example, if the KEY is associated with a 

20 store's loyalty card). Thus, the consumer can still be 
anonymous to the DAP, even if the store is aware of the 
consumer's identity or just his address. 

These different levels of identification imply 
different mechanisms and timing for reconciling the discounts 

25 of goods purchased by the consumer. These mechanisms are 
discussed below. An important aspect of the invention is 
that disjoint sets of KEYs may refer to the same consumer, yet 
still be reconciled to belong to one consumer. For example, a 
consumer may belong to two different loyalty cards, each with 

3 0 their own KEY. The DAP may thus have: 

<KEY1, store loyalty ID1> 
<KEY2, store loyalty ID2> 

One way to associate KEYl and KEY2 to the same consumer is 
35 simply to allow the consumer to specify both Keys. This can 
allow the program running on the consumer's computer 10 to 
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automatically correlate both accounts to present the consumer 
with a total summary of purchasing history, even though the 
DAP computer 11 is unaware of the correlation. It is also 
possible for the consumer to provide KEYl and KEY2 (and KEY3, 
5 KEY4, etc.) to the DAP computer 11 so that the DAP computer 

can make the association. This same technique can be used to 
correlate addresses if less secure Key binding is used. 

Duplication of discounts is sometimes a problem. 
Within a single Key space (e.g., one bound to a single loyalty 

10 or credit card) , duplication can be eliminated by simply 
refusing to issue more than one, or only a set number of, 
promotion (s) for a given item within a given time period. The 
same can be done across multiple correlated Key spaces- If 
Key spaces are un-correlated, then duplication cannot be 

15 categorically disallowed. However, because Key spaces are 

typically shared by non-conflicting retailers, and because the 
consumer can gain increasing benefits by repeatedly using the 
same Key space, duplication of promotions across un-correlated - 
Key spaces is not a severe problem. 

20 For the consumer's convenience, the DAP may issue an 

identification card to each consumer with a magnetic or bar 
code for his Key. The card allows the consumer to quickly 
identify his Key and account at a store with a UPC scanner 26 
or ATM reader 27. The card might also show the Key so that 

25 the consumer can type in his Key. Alternatively, for 

additional security, the consumer's identification card may 
carry an encrypted or hidden identification code (such as a 
PIN) before the consumer's Key is validated after being read 
at a store, for example. Alternatively, the DAP may simply 

30 rely on Keys already obtained by the store or credit card 
agency - 

The Key Database is also maintained on the DAP 
Internet server 14. When the database on the DAP computer 11 
is updated, so is the DAP Internet server 14. Whenever the 
35 consumer uses his or her computer 10 to access the DAP 

Internet server 14, he must specify his KEY. This enables the 
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consumer to access information unique to himself. The DAP 
Internet server 14 presents the discounts available to the 
consumer over his computer 10. In addition to a menu search' 
of available discounted products, a "stream of consciousness" 
5 search is also available. For a example, a consumer's 

interests may be queried. The DAP Internet server 14 then 
suggests that the consumer investigate products of a certain 
type. 

Note that there is no particular security placed on 
10 the Key itself. The knowledge of the Key does not compromise 
the security of the system, since the consumer' s identity is 
unavailable for harassment (for example, by telemarketing 
firms) and selection of discounts by others using the Key 
confers no benefit on the person other than the true 
15 keyholder. 

Presentation of D iscounts on the DAP Internet Server 

To present the discounts and other promotions to the 
consumers, the DAP Internet Server 14 maintains a database of 
20 products categorized by type, price, stores in which locations 
sell the product, etc. Each discounter makes its discounts 
available to the consumer through the DAP computer 11. The 
discounter "advertises" its products in this manner over the 
Internet . 

25 A record from this Product Database appears as: 

<PRODUCT_NAME, CATEGORYq, CATEGORYi, . . . CATEGORYn> 
where PRODUCT_NAME is the identification of the particular 
product (or service), and CATEGORYq, CATEGORYi, . . . CATEGORY^ 
are the different fields by which the product may be 

30 categorized- The category information is also termed the 
Product Tag. The DAP Internet server 14 has this database 
information so that the consumer can browse through product 
and discount information, as described above. 

In addition, the discounter supplies the DAP with 

35 other information, including the discounter' s name and other 
information which identifies the discounter (DISNAME) , the 


14 

discounter's billing information so that a discount credited 
to a consumer is debited, either automatically or by invoice, 
from the discounter, discount information (Discount Tag) , the 
product UPC number (UPC_NUMBER) , and other related 
5 information. Discount Tag contains consumer targeting 

information, i.e., what kinds of consumers should receive what 
discounts. A Discount Tag Database record appears as: 
<DISNAME , UPC_NUMBER, CRITERIONO , CRITERIONl , 
CRITERI0N2, . . .CRITERION J, DISCOUNT, DISCOUNT_FLAGS , 
10 DISCOUNT_TIMEOUT> 

where CRITERIONO, CRITERIONl, CRITERI0N2 CRITERION J are 
different fields containing consumer targeting information. 
f3 An -example of a criterion is "customers who apparently live in 

postal ZIP code Z." The CRITERION fields can be matched by 
ryi5 the purchasing patterns of consumers. As described below, 

these purchasing patterns may be derived from the historical 
o data . of each consumer's account, including selections made 

and redeemed, and just selections made, though without the 
'h^' actual identification of the consumer. To help the discounter 

;r:20 make effective use of the consumer information, the DAP 

computer 11 has a program which uses the criteria and discount 
^=5 information to target consumers with discounts in a simple yet 

anonymous manner. The program uses GUIs (Graphical User 
Interface) at the discounters* computers 31, or computers used 
25 on behalf of the discounters, to allow each discounter to 
easily match customer, criteria, and discount information. 
Note that from the consumer information, consumer targeting 
may be as narrow as possible, i.e., individuals, or very 
broad, e.g., large aggregates of consumers in particular 
3 0 regions , etc . 

It should be noted that though the word, discount, 
is used, the promotions might be in other forms of purchase 
incentives- For example, based upon a consumer's purchasing 
history, the promotion might be a special price for an item or 
35 items to that particular consumer. Correlations between items 
might be found such that promotions can be created for items 
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which have no obvious relationship to items purchased by the 
consumer- Caribbean vacations might be offered for large 
purchases of premium dog food, as a purely hypothetical 
example . 

5 The DISCOUNT_FLAGS include one or more fields which 

indicate special discount processing information — for example, 
3 items must be purchased for the discount to apply. TIME__OUT 
are data fields containing information for the management of 
discount timing, including the period of validity of a 

10 discount, and the expiration of the eligibility of a consumer 
for discounts. 

The discounter also supplies a Product Distribution 
Database to the DAP. This database contains the information 
on the particular retailers which stock each of discounted 

15 items- The database informs the consumer who is eligible for 
a discount based upon criteria selected by a discounter where 
an item is available for purchase and the discount. 
Optionally, the database may allow the discounter to restrict 
discounts to specific stores, or to allow discounts only at 

20 stores selected by consumer- The database has the network 

location of each store for subsequent download/upload of store 
information. A record of this Product Distribution Database, 
appears as: 

<STORE_NAME, STORE_LOCATION , STORE_NETWORK_ADDRESS , 

25 ITEMo, ITEMi, ITEM2, . . • ITEMj> 

where STORE_NAME is the field of the retailer identification, 
STORE__LOCATION is the field of the retailer's particular 
store, STORE_NETWORK__ADDRESS is the field of the electronic 
address of the store, and ITEMq, ITEMi, ITEM2, . - . ITEMj are the 

30 fields identifying the particular discounted items. This 

database is maintained in both the DAP computer 11 and the DAP 
Internet server 14. 

Selection of Discounts by the Consumer 
35 Through his or her computer 10, the consumer browses 

through the discounts or other promotions available to him or 
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her at the DAP Internet server 14. A Web site provides a GUI 
for the consumer's computer 10 to easily access his or her 
account on the DAP computer 11, The Web site might be 
operated by the DAP computer 11 through the server 14, or the 
5 server 14 itself might operate the Web site and interact with 
the DAP computer 11 as needed. Alternatively, if the 
consumer's Key is created through a particular company's 
loyalty card program, the consumer may be directed to a Web 
site operated by the company. 

10 The consumer selects the desired discounts, and if 

required, at which stores. Additional information about the 
products, such as marketing information, may be displayed. 
For instance, from previous purchasing information about the 
consumer, or, more precisely, the consumer account, the DAP 

15 computer 11 can make a correspondence with the consumer's Key 
with one or more stores where the 'consumer is likely to make 
his or her purchases and present promotions at those stores to 
the consumer. The selected discounts, and their total value 
are displayed to the consumer and a per-account list of 

20 selected discounts, any restrictions on these discounts, when 
each discount was selected, and the expiration date of the 
discount, along with the discount value, is sent to the DAP 
Computer 11. 

The consumer's selections are recorded by the DAP 
25 computer 11 through the DAP Internet server 14. To prevent 
tampering of the consumer ' s selections, the DAP computer 11 
also has an optional security lock feature. Once the security 
lock is set, it is difficult, or impossible, for a malefactor 
to deprive a consumer of his selected- discounts by 
30 subsequently deleting or changing them. This lock may be set 
by the consumer after his selections are made. The lock may 
also be set by the DAP if a pattern of misuse is detected, by 
the receipt of consumer complaints, for example. 

To validate the purchase of the selected discounted 
35 products by the consumer, information is exchanged between the 
master store computer 23 and the DAP computer 11, over the 
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network illustrated in Fig. 2. The information helps the 
store administer the sale of the discounted products to the 
customer who selected the products , 

An additional feature of the consumer's account is 
5 that items which are purchased but not promoted, may also be 
sent to the DAP computer 11 to maintain a complete shopping 
"microhistory" for the consumer. This microhistory can 
subsequently be used to create a profile on a (typically 
otherwise anonymous) consumer's purchasing habits for 
10 promotional targeting, as well as to provide the consumer with 
an aid for personal financial accounting, as discussed in 
greater detail below. 

Customer Purchase of Discounted Items at Store 
15 To realize his selected discounts, the consumer 

identifies his Key during the purchase of items at a store. 
Each store maintains a record of the consumers' transaction, 
such as: 

<CUSTOMER_NO. , <UPCo, PRICEq, QUANTITYo>, <UPCi, PRICEi, 
20 QUANTITYi>, . . .<UPCk, PRICEk, QUANTITYk>, <DISCOUNT_TYPEo, 

VALUEo>, <DISCOUNT_TYPEi, VALUEi>, . . . <DISCOUNT_TYPEKf 
VALUEk» 

This transaction record is part of a Customer Record database. 
The store registers 21, under operation of software from the 
25 DAP, accepts Key information from the consumer and appends the 
Key and time of transaction, i.e., 

<KEY, TIME> 

to the transaction record. The Customer Record database is 
stored in the store master computer 23. 

30 The consumer may provide his Key with a card 

containing the Key in the form of magnetically-encoded data or 
bar code data, which is simply scanned in. The Key may be in 
a separate card, or in a credit /debit/smart card which also 
includes the Key data. A retailer's loyalty card can include 

35 the Key data, which might simply be the store ' s . loyalty card 
ID. The Key can also be provided by the consumer by simply 
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entering the Key at an ATM reader 27 (using a template, such 
as those on push-button telephones) or letting the store clerk 
enter the Key at the register 21. More exotic forms include 
biometric identification. In any case, the DAP software at 
5 the register 21, and possibly at the master store computer 23, 
records the Key and the transaction data. 

Alternatively, the consumer need not specify his 
Key. With a list of financial institutions which are tied to 
the DAP consumer accounts, the store can determine the 

10 consumer's Key. For example, upon the reading of his 

credit /debit/smart card, say, a V.ISA (a registered trademark 
of VISA International, Inc.) credit card, the store's register 
21 automatically ties the transaction to the consumer's Key- 
Such accounts may be "read-only, " or, more precisely, 

15 "deposit-only," financial institution accounts, which are 
credited with accepted promotions. The credits in these 
accounts are subsequently transferred into the consumer's 
liquid accounts upon validation of the identity of the 
cardholder. 

20 Note that the Key may be securely associated with a 

customer's financial institution account (through the Key 
Database) without the DAP or the store knowing the financial 
institution account. Theft of a Key is not serious because 
someone in possession of the Key can only select discounts or 

25 other promotions which accrue to the actual Key holder. No 
significantly bad results can occur since the discounted 
products must still be legitimately purchased. 

At the time of purchase, the store register 21 may 
print an itemized list of the discounts which the DAP will 

30 credit. The data describing discounted items purchased and 

optionally, all items, must be reconciled with the DAP. Note 
that full reconciliation may require that all discounts (e.g., 
paper coupons) be also included in this data, so that two or 
more discounts on the same item, which are not permitted by 

35 the retailer or the manufacturer for aggregation, are not 
added . 
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Thus, there is a flow of data from the DAP computer 
11 to the store register 21 (generally via the store computer 
23) which describes discounts available to a given account 
(generally accessed via the account KEY) , and a reverse flow 
5 of data from the store register 21 to the DAP computer 11 to 
describe the items actually purchased. The latter flow is 
needed to ensure that discounts which have been used cannot be 
reused unless reuse of discounts is specifically allowed. 

The flow of data to the store register 21 from the 

10 DAP computer 11 must take place after the consumer selects 
applicable discounts and before the consumer arrives at the 
store. The DAP computer 11 may infer, based on likely 
location of the store where the discounts will be applied, or 
most likely applied, (either the store is expressly noted, or 

15 the consumer's purchasing history may indicate likely store 
selection) , the time interval the DAP computer 11 has before 
the store computer 23 must be informed to ensure that the 
consumer's discounts are available, etc. It is also possible 
that the DAP computer 11 is consulted directly for each 

20 consumer action, thus eliminating the need for the DAP to 

pre-load the store computer 23 with data. Similarly, there 
may be a time delay before the DAP computer 11 is informed of 
the actual purchases (since it may be reasonably assumed that 
it may take some time for the consumer to go to a different 

25 store and attempt to re-use an accepted discount, and the 
store computer 23 could track attempts by the consumer to 
re-use an accepted discount at the same store) . 

Alternatively, the DAP computer 11 may be informed immediately 
upon consumer purchase. 

30 In any of the data flow scenarios where the DAP 

computer 11 and the store computer 23 do not interact 
immediately and information is saved for a period of time 
before the account is reconciled, we refer to this stored 
information as cached data. Caching data can reduce latency 

35 (so that the consumer need not wait for a remote transaction 
between the store and DAP computers take place) , but 
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introduces complexity since cached data can become invalid in 
many ways. For example, if several stores receive cached data 
about a given account, once the customer using the account 
makes a purchase, there is only a limited amount of acceptable 
5 delay before the cached data must be invalidated. This can be 
accomplished by having a computer act upon an invalidating 
event (the DAP computer 11 may do this if, say, a discount is 
canceled or added; the store computer 23 does this when 
discounts are accepted) and informing its peer. 

10 Alternatively, the computer acting upon an invalidating event 
may first query its peer to see if any other invalidating 
events have happened. If not, the transaction can be 
completed and the peer computer is put on notice that 
subsequent transactions should not be processed immediately. 

15 Otherwise, the transaction must wait until the invalidating 
event has been completely processed and any necessary cached 
data are reloaded - 

Reconciliation of Consumer Accounts 

2 0 To reconcile each consumer account, the recorded 

selections and time of selection information on the DAP 
Internet server 14 are validated against the purchase proofs 
(time, products, KEY, store ID) recorded at the store. From 
the store, the DAP computer 11 receives the purchase proof 
25 records, the Key, a financial institution or read-only 
financial institution account number, the identity and 
quantity of the discounted items purchased, other applied 
discounts, and the time of purchase, for each consumer 
account . 

30 A Discount List database is created for a list of 

discounts due to the customer. A record of this database 
appears as : 

<KEY, STORE, UPCO , OTHER_DI S COUNTS 0 , UPCl , 

OTHER_D IS COUNTS 1 , . . . . > 

3 5 From the discount information supplied by each discounter and 

stored on the DAP computer 11, the computer 11 compiles a 
Reconciled Discount List database, a final list of discounts 
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created by resolving conflicting discounts. For example, if a 
paper or electronic coupon had also been presented by the 
consumer for a discount, this discount may be disallowed. 
Reconciliation with the consumer discount selections is also 
5 made to obtain the correct discounts due. In making the 

reconciliation between purchases and consumer selections, some 
discounters may not care if the purchase was made before the 
consumer's selection, instead of selection first. 

A record of the Reconciled Discount List database 

10 appears as: 

<KEY, STORE, DISCOUNTO, UPCO , DISCOUNTl, UPCl . . . . > 
From the Reconciled Discount List database, the' total discount 
due for each Key is computed and a list of discounts payable 
by the discounter is .determined. The DAP computer 11 debits 

15 the discounter's financial account computer 3 2 accordingly. 
Note that DISCOUNT contains information indicating the 
identity of the discounter. Conversely, if the DAP computer 
11 has the database for mapping each KEY to a consumer's 
financial institution account, the DAP computer 11 credits the 

20 consumer's financial institution account. Otherwise, the 

discount amount is simply deducted from the consumer's bill at 
the point of sale. If the consumer's financial institution 
has the necessary information to make the mapping between the 
Key and a financial institution account, the necessary 

25 information is sent directly to the financial institution 
computer 24. All of these transactions are performed 
electronically where possible. 

A full history of all data is retained for auditing 
purposes. Final auditing steps, such as the validation of 

3 0 store inventory to cover the store claims for credit of the 
sale of discounted items and certification by an external 
accounting agency, complete these steps of the operations. 

The Reconciled Discount List database is also stored 
on the DAP Internet server 14 so that each customer, using his 

35 or her KEY, can browse his discount file. This information 

also facilitates the consumer's selections since the database 
provides an indication of the consumer's interests by the 
previous purchases. For additional convenience and usefulness 
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to the consumer, the consumer's information is available in 
industry standard format. This allows the consumer to use 
third party software, such as personal finance management of 
which Quicken, (a registered trademark of Intuit, Inc. of 
5 Mountain View, California) is merely an example, to maximize 

the use of the consumer's information, for his or her benefit. 

The purchasing history can be used to infer consumer 
marketing information without the intrusion of additional 
personal information disclosure or the burden of consumer 

10 su2rveys . The aggregation of the purchasing histories of the 
consumers can be used to find trends or patterns in consumer 
purchases as broadly or narrowly as desired. Nonetheless, 
despite this use of consumer information, the privacy of the 
particular consumer is protected as described above. 

15 It should be observed that the present invention has 

many security features and options: 

a. If the consumer's Key is associated with a 
financial institution account, Key secrecy is unnecessary 
since security depends only on the security of the financial 

20 institution account. 

b. Stores cannot cheat (other than to falsely 
increase processing charges) .by issuing false proofs of 
purchase to a Key since the benefit goes only to the true 
holder of the financial institution account. 

25 c. If, instead of the DAP, a financial institution 

issues the Key to the consumer, only the Key is required to be 
shared with the DAP. Neither the store nor the DAP needs 
access to the consumer's financial institution account 
associated with the Key. 

30 d. If a financial institution creates a special 

deposit -only account, which access is shared with the DAP 
and/or the store, only the financial institution may transfer 
money from this account to a main consumer account upon a 
discount validation by the DAP. 

35 e. By limiting or prohibiting modifications to 

discounts selected by the consumer, a computer "hacker" with 
knowledge of the consumer's Key cannot frustrate the consumer 
by tampering with consumer selections. 
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f . By limiting the number of selected products, the 
time period during which the selected discounts remain valid, 
or by using simple challenges, consumers cannot abuse the 
system by simply selecting all discounts, or even having 
5 discounts selected by an agent program automatically, to avoid 
the conscious selection of discounts. If such were possible, 
consumers could obtain the benefits of discounts without 
returning to the discounters the benefit of their advertising. 

While the foregoing is a complete description of the 
10 embodiments of the invention, it should be evident that 

various modifications, alternatives and equivalents may be 
made and used. Accordingly, the above description should not 
be taken as limiting the scope of the invention which is 
defined by the metes and bounds of the appended claims. 


